sudo_ml @sudo_ml

Step 1: Export from X. Settings → Your account → Download an archive of your data. It can take 24–48 hours for X to generate the archive, then you get a zip containing all your tweets, media, followers, DMs, etc. as JSON. GitHub Step 2: Import to Nostr. The main tool for this is exit.pub (EXIT, built by pablof7z). You unzip your Twitter archive and use exit.pub to import your data into Nostr — original timestamps are preserved, so a 2009 tweet shows up as posted in 2009, and you get granular control over which tweets to import (threads, non-replies, replies). You sign the imported events with your nsec via a NIP-07 extension, so do this with your real key only if you trust the flow — or audit it first, given your line of work.

NEW: malware developers added nuclear & biological weapons text to to their spyware. Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner. Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky. When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover...and exploit. We are only in the earliest days of attackers leveraging these features, and it wouldn't surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted. In the weeds: @SocketSecurity's post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation. H/T to colleagues that shared this with me socket.dev/blog/mini-shai…

JUST IN: @AlliumLabs says zcash:native volume spiked 12 to 13x normal on May 26, days before Zcash’s four year privacy bug was discovered, while five wallets opened about $72M in shorts and later realized $3.43M in profit, pointing to possible early knowledge.

Monero PSA: Critical P2Pool Security Update "A critical vulnerability has been discovered in all currently released P2Pool versions. [...] We are continuously monitoring the network and have reviewed the available historical logs. We have found no evidence that this vulnerability has been exploited."

zcash had an infinite mint bug in its orchard shielded pool for 4 years. anthropic's claude found it. no human auditor caught it. trail of bits, NCC group, ABDK all missed it because the bug lived in zk circuit constraints, not application logic. zcash disclosed transparently, ironwood upgrade with mandatory formal verification targeting Q3 2026. here's the part worth watching. anthropic's project glasswing just added monero to the audit queue. if bulletproofs or RingCT have a similar flaw, monero has no electric coin company to coordinate an emergency upgrade. decentralized governance is a feature until you need to patch an infinite mint in 72 hours

New credentials attack on Google, it's a subtle one. The email actually comes from account.google.com. It informs you that your recovery contact (an email you don't recognize) is about to reset your password and prompts you to take action. There's a link that appears to point to accounts.google.com but uses the continue URL parameter to redirect you to sites.google.com, which hosts the attacker's site. If you scroll down, you can see the bottom of the email, which just shows that someone is asking to add you as their recovery contact. The entire first part of the email is a user-controlled field in Google's system that the attacker controlled to include the malicious link and text.

keyboard_arrow_left Previous keyboard_arrow_right Next

This is what the UK spyware proposal means. There must be government spyware on every mobile device. It shall watch everything that happens, including always watching the screen, looking for things the government disapproves of. When anything is flagged by the software as something the government doesn't like, the software must block it from being sent or displayed (in realtime). The user of the device must not be able to shut this watching and blocking off. The only way to shut it off would be to ask the government or its proxies to do so for you, at their discretion. Therefore the whole device must be locked down. Administrator rights and the decision of what software or operating system to run or not to run must be taken from the owner/user and handed to the government and its proxies. Apple and Google are themselves working hard to lock down the devices they are involved in to shut out competition and establish a duopoly. The UK government says it is "working closely" with Apple and Google and currently they synchronise and coordinate their communication on this subject. The UK government is now proposing to mandate what would otherwise be illegal anti-competitive practices. @GrapheneOS on the Apple and Google duopoly: x.com/GrapheneOS/sta… Statement from @signalapp x.com/signalapp/stat… @ReclaimTheNetHQ on the state spyware: reclaimthenet.org/starmer-calls-… The government announcement: gov.uk/government/new…

Signal @signalapp

3 days ago

Our statement on the UK government’s demand that all content on all devices sold or used in the country be scanned, on the presumption of nudity, using a dystopian combination of age verification and content scanning. This proposal will not safeguard children. It endangers us

723 8K 41K 2.6M 4K

INCIDENT SUMMARY: We stored 3 of 6 keys to our Gnosis Safe holding $36,000,000 on one employee’s laptop

Humanity @Humanityprot

3 days ago

INCIDENT UPDATE: Last night, June 8, the H token was hit by a coordinated attack across Ethereum and BSC. While we’re still investigating this incident, we want to be transparent with our community about what happened. As of right now, ~$36M+ has been stolen across both chains

401 185 506 333K 83

Sam Bankman-Fried and I were prison bunkmates and I know him well. So I read this with more context than most. Sam and I argued more than once about the same thing: his refusal to accept ANY responsibility for what he did. Not once did he admit he’d done anything wrong — even after I told him repeatedly he could never begin to redeem himself without that acknowledgment. You don’t earn a pardon when you can’t admit, even to yourself, that you did wrong.

Bloomberg @business

3 days ago

FTX co-founder Sam Bankman-Fried formally applied for a presidential pardon bloomberg.com/news/articles/…

59 85 228 1.4M 59

If you've adopted AI at your company but haven't seen any tangible results, read this 1990 article: "The Dynamo and the Computer" by Paul David. When electricity first arrived, factories that "adopted" it barely got faster. They just swapped the steam engine for an electric one and ran everything else exactly as before: same machine layout, same workflow, same management. Electricity in, no real gains out. The most common mistake with any new technology is to drop it into the old organization and then declare the transformation done. The real leap came decades later, when each machine got its own small motor. Suddenly machines no longer had to be lined up around one central drive shaft. They could be rearranged around the actual flow of work. The productivity gains didn't come from electricity. They came from REDESIGNING THE ENTIRE FACTORY around it. AI is the same. Bolting it onto your existing process gets you a faster steam engine. The payoff comes when you redesign the work itself. (link to paper in comments)

@rel_zeta_tech What does one do with this? What does this enable? - idiot question of the day

Her Amazon orders were 18% more expensive than her sisters for the exact same products. They lived in the same city. Had Prime accounts on the same plan. Were buying the same brands. Often within hours of each other. Yet every single time they compared receipts, her totals were higher. A laundry detergent her sister bought for $14.99 cost her $17.49. A pair of headphones her sister got for $79 cost her $94. A printer ink cartridge her sister paid $32 for showed up in her cart at $39. She thought maybe she was looking on the wrong day. Then a friend who used to work in Amazon's pricing team explained the truth over dinner. "Amazon doesn't have one price. They have millions of prices, one for every customer. The price you see is calibrated specifically for you, based on what Amazon has learned about your behavior. Your sister is paying less because Amazon has decided she'll only buy at lower prices. You've shown them you'll pay more." She asked how that was even legal. He smiled. "It's not just legal. It's the entire business model. Most shoppers have no idea this is happening and Amazon would prefer to keep it that way." Here's everything he explained over the next 30 minutes. 🧵

I love this

Andrew Yeung @andruyeung

5 days ago

Clubbing is dead and has been replaced by fitness & wellness. Ppl used to party to socialize and date but now they do things like HYROX, bathhouses, and running raves. The death of clubbing is something to be studied: — US has lost 12% of its nightclubs in the last 24 months

keyboard_arrow_left Previous keyboard_arrow_right Next

594 966 8K 5.0M 3K

The Singapore government is trying to block access to social media posts (some featuring videos, many in Chinese) warning citizens that their nation is being overrun by ethnic Indians. The content originated on China-based platforms such as Douyin, Rednote and TikTok. Singapore handles foreign information operations with unusual clarity and decisiveness. It identifies them early, then compels platforms to block the content so it never reaches Singaporean eyes. I remain skeptical that this game of censorship whack-a-mole can ever be fully won, but there is real value in ministers publicly naming the source and explaining exactly why these narratives are subversive. The narratives being peddled claim that Singapore’s multiracial model is just a “facade” to placate Western sensibilities, and that the country has really always been anchored by its Chinese-majority demographics. They assert that “Singapore’s culture is fundamentally Chinese,” and that the government’s decision to distance itself from Beijing while ignoring the “threat” of a growing Indian community will end in disaster. The videos portray the Chinese majority as under siege by an increasingly powerful Indian minority, including politicians. They single out President Tharman Shanmugaratnam, of Indian heritage, and warn that “curry concentration” (yes, really) is eroding Chinese cultural dominance. This coordinated push arrived immediately after Senior Minister Lee Hsien Loong’s recent viral remarks in China where he reminded Beijing that Singapore-China ties are based on “mutual benefit and shared interests, not ethnicity.” He drew a clear red line saying that Singapore is sovereign and not an overseas extension of the PRC. Chinese netizens and state-aligned voices reacted with indignation, framing it as ingratitude from “ethnic kin” who should show deference to the motherland. The subtext was clear: how dare Singapore prioritize its Indian, Malay, and other communities over blood-and-soil solidarity with the CCP? Connect the dots to Beijing’s broader information warfare against Israel, the United States, and others, and the pattern becomes clearer. Especially since Oct 7th, Beijing has weaponized antisemitism as a wedge issue. On its tightly censored platforms, state media and influencers have let Hitler memes, "Jews control America" conspiracies, and Nazi comparisons proliferate unchecked. This all has spilled out into global social media. What is the goal? Fracture the West, erode US-Israel ties, poison diaspora debates, sow domestic discord, and paint America's alliances as puppets of a shadowy cabal. It's created and amplified because it distracts, divides, and weakens the very coalition (MAGA) containing Chinese expansion. Now, apply this same lens to the sudden surge of anti-Indian content in Singapore and even in the US, particularly targeting tech circles. While organic frustrations (H-1B abuse, cultural friction) exist, the volume, timing, and precision point to deliberate seeding. Amplify resentment against Indian professionals and you damage the American-India tech alliance, the most credible long-term hedge against China dependence. It disrupts supply-chain diversification and poison talent pipelines in Silicon Valley. In Singapore, the same operation pits the Chinese majority against the Indian community, weakening society from within. This should be recognized for what it is: classic United Front work in the digital world. It's low-cost, high-impact subversion with plausible deniability. China doesn’t need naval fleets in the Strait of Malacca when it can export ethnic poison to fracture societies from within. A divided Singapore becomes a less reliable financial and technological anchor for US interests in Southeast Asia. A majority-Chinese Singapore riled up by Indian invasion narratives becomes more inclined to embrace the ethnic ties to the motherland and advocate for deepening Singapore's ties to the CCP. Likewise, a fractured US-India partnership keeps supply chains tethered to the PRC. Stoked antisemitism keeps the West chasing ghosts instead of confronting the primary challenge of our era. Western democracies cannot and should not copy Singapore’s blunt censorship model. But we must learn from its vigilance. We are all being targeted by sophisticated, state-driven influence campaigns designed to exploit our existing fault lines. Recognizing the playbook is the first step toward resisting it. The price of complacency is a more divided, weaker, and more easily manipulated world.

380K ZEC was deshielded. Here's where it actually went. Only half of the 380K ZEC that was deshielded actually moved. 45% is still sitting at transparent addresses, untouched. Only 21% of the deshielded ZEC actually left Zcash (bridged). That's 82K ZEC, 1.6% of the shielded pool, 0.5% of total supply. 47K went to exchanges. That's the total sell pressure from Orchard holders. 0.28% of supply. On a $6.7B cap. Meanwhile, ~118K ZEC was shielded during the same period. Even at peak FUD, people were buying and shielding. What this says? - Holders parked. They didn't panic. - The selling was traders who were already on exchanges. - Security is hardened and will be even more so. - Price went from $300 to $402. If you bought the dip, you know. Future is bright.

x.com/i/article/2063…

The kind of migration that Zcash is going to execute this summer to post-quantum ready, formally verified , supply verified cryptography is something every cryptocurrency will have to do in next 3 years and Zcash will do it all in a month or so.

Gross consumer violation: you sign up for a service, they see you use GrapheneOS, and they report you to the authorities. What?

sudo rm -rf --no-preserve-root / @pcaversaccio

6 days ago

.@getyoti just "admitted" they consider one of the world's most respected privacy-focused mobile OS a red flag. listen you fucktards: flagging GrapheneOS users as "suspicious" isn't security expertise; it's some weird security theater clownshow. the world turns into an Orwellian

21 47 372 15K 54

From my private messages, with permission. (This was before our Ironwood announcement.)

If you find a vuln like this (and you're an evil scumbag) then you'll be interested in counterfeiting and dumping the money as fast as possible. You can't know how many other people discovered the same flaw, and as soon as it is discovered or someone else starts dumping counterfeit ZEC on the market, you begin running out of time quickly. Thus, you'd expect that if anyone could find a vuln they'd exploit it right away, and we'd see it because the shielded pool would quickly drain and the market would dump. But despite the massive amounts of liquidity available, neither of those happened. Instead, as soon as a very plausible first-responder found it (Taylor does cutting edge security research for us, and has worked with us for over 10 years) they shut the pool down and fixed it. (As an aside, while it's of no comfort to the average person, I can assure you all of the people who found this vulnerability and patched it are the most honest people I've ever met in my life.) I'm keeping my money where my mouth is though and promise to keep the vast majority of my net worth in the Orchard pool until I announce publicly otherwise! :)